@theokit/sdk 4.54.0 → 4.56.0

package/dist/{agent-DSec-E0c.d.ts → agent-DIu6FooJ.d.ts}

@@ -551,6 +551,19 @@ interface ProviderProfile {
      * Default off — only enable for routes/models known to leak (e.g. a qwen3-coder profile variant).
      */
     extractToolCallsFromContent?: boolean;
+    /**
+     * Opt-in encrypted-reasoning carry for `apiMode: "responses_api"` (usetheokit/theokit-sdk#383).
+     * When `true`, the request adds `include: ["reasoning.encrypted_content"]` and
+     * `reasoning.context: "all_turns"`, and the transport replays the ciphertext the provider returned
+     * so the model does not re-derive its chain of thought on every round of a turn.
+     *
+     * Default off, and deliberately per-profile rather than per-`apiMode`: `include` is a documented
+     * Responses-API field but `reasoning.context` is not, so a provider that validates strictly
+     * answers it with `400`. Enable it only for a backend measured to accept both — the builtin
+     * `openai-chatgpt` profile is one, because issue #383 captured OpenAI Codex sending exactly these
+     * fields to that endpoint. Ignored by every other `apiMode`.
+     */
+    encryptedReasoning?: boolean;
 }
 
 /**
@@ -799,6 +812,19 @@ type Plugin = (BasePlugin & {
  * @public
  */
 type SettingSource = "project" | "user" | "team" | "mdm" | "plugins" | "all";
+/**
+ * A tool the SDK declares to the model on its own initiative — not one the consumer passed in
+ * {@link AgentOptions.tools}, and not one an MCP server exposed.
+ *
+ * These three names are also the ones the SDK reserves: a custom tool may not claim them. Listing
+ * one in {@link AgentOptions.withheldBuiltinTools} both stops it being declared and releases the
+ * name, because nothing of the SDK's is occupying it any more.
+ *
+ * Named for usetheokit/theokit-sdk#381, which is the report that the catalog had no opt-out.
+ *
+ * @public
+ */
+type BuiltinToolName = "shell" | "memory_search" | "memory_get";
 /**
  * Local agent configuration.
  *
@@ -809,14 +835,17 @@ type SettingSource = "project" | "user" | "team" | "mdm" | "plugins" | "all";
  *    an evaluation invalidated this way: the working directory held the benchmark's answer key, and
  *    two transcripts show the model citing it. Deny it explicitly if that matters —
  *    `{ tool: "shell", action: "deny" }` on a {@link PermissionEngine} rule is terminal under every
- *    permission mode, including `bypass`. Note the tool still appears in the advertised catalog, so
- *    the model may attempt it and be refused, rather than never seeing it.
+ *    permission mode, including `bypass`. A deny rule still leaves the tool in the advertised
+ *    catalog, so the model may attempt it and be refused; to keep it out of the catalog entirely,
+ *    pass `withheldBuiltinTools: ["shell"]` on {@link AgentOptions} (usetheokit/theokit-sdk#381).
  *
  * 2. **Finished runs write a transcript to disk**, at `.theokit/memory/sessions/<runId>.md` under
  *    the workspace `cwd`, with the full prompt and reply. This happens with no `memory` config and
- *    with `settingSources: []` — it is what `memory_search({ corpus: "sessions" })` reads. It is not
- *    currently opt-out. If the workspace is a git repository, add `.theokit/` to `.gitignore`: one
- *    report describes a transcript reaching a public repo before it was noticed.
+ *    with `settingSources: []` — it is what `memory_search({ corpus: "sessions" })` reads. Opt out
+ *    with `memory: { enabled: false }`, which suppresses the write entirely
+ *    (usetheokit/theokit-sdk#382). Leaving `memory`
+ *    unset still writes, so if the workspace is a git repository, add `.theokit/` to `.gitignore`:
+ *    one report describes a transcript reaching a public repo before it was noticed.
  *
  * @public
  */
@@ -1220,6 +1249,32 @@ interface AgentOptions {
      * See {@link CustomTool}.
      */
     tools?: CustomTool[];
+    /**
+     * Builtin tools this agent must NOT declare to the model. Absent or empty ⇒ every builtin the
+     * rest of the configuration would register is declared, exactly as before this option existed.
+     *
+     * WHY WITHHOLDING IS NOT THE SAME AS DENYING. A consumer that cannot allow `shell` — because it
+     * reaches outside their own sandbox scope — can already refuse the call in a `pre_tool_call` hook
+     * or with a {@link PermissionEngine} deny rule. That stops the execution and pays for the offer
+     * twice over: the schema rides in EVERY request of EVERY round (measured at 267 characters for
+     * `shell`, 1,462 for `memory_search` + `memory_get` together — usetheokit/theokit-sdk#381), and
+     * the model can spend a whole round discovering a refusal it had no way to anticipate. Declaring
+     * a tool that is guaranteed to be refused is the wrong shape; withholding removes it from the
+     * catalog, so the model is never offered what it cannot have.
+     *
+     * WITHHOLDING RELEASES THE NAME. `withheldBuiltinTools: ["shell"]` lets {@link AgentOptions.tools}
+     * declare a tool called `shell` without the `tool_reserved_name` error — the reservation exists to
+     * stop a collision with the SDK's own tool, and there is no longer one to collide with. Every
+     * builtin still declared stays reserved.
+     *
+     * This governs DECLARATION, not authorization. A withheld builtin is simply absent from the
+     * catalog: a model that invents the name anyway gets `Unknown tool <name>` (exit 127) rather than
+     * an execution, but nothing here evaluates a policy. Keep the deny rule if you need one that a
+     * per-send `tools` override cannot reopen.
+     *
+     * @public
+     */
+    withheldBuiltinTools?: readonly BuiltinToolName[];
     /**
      * SE37 — opt-in reasoning. When `true`, the agent gets a chain-of-thought
      * preamble prepended to its system prompt AND the `think` reasoning tool
@@ -1583,4 +1638,4 @@ interface ListResult<T> {
     nextCursor?: string;
 }
 
-export { type TelemetrySettings as $, type AgentOptions as A, type BudgetTracker as B, type CloudOptions as C, type PostAssistantReplyContext as D, type PostToolCallContext as E, type PreToolCallContext as F, type GetAgentOptions as G, type HookName as H, type InlineSkill as I, type PreUserSendContext as J, type PreUserSendResult as K, type LocalOptions as L, type MemorySettings as M, type ProviderTransform as N, type ProviderTransformContext as O, type Plugin as P, type SessionLifecycleContext as Q, type RecordSessionSummaryArgs as R, type SystemPromptResolver as S, type SessionRecord as T, type SessionStore as U, type SettingSource as V, Skill as W, type SkillsResolver as X, type SkillsResolverContext as Y, type SystemPromptContext as Z, type SystemPromptMemoryFact as _, type AgentDefinition as a, type ToolCallSummary as a0, type ToolResultTransformContext as a1, type TransformContext as a2, type SkillsSettings as b, type ListAgentsOptions as c, type ListResult as d, type SDKAgentInfo as e, type ListRunsOptions as f, type GetRunOptions as g, type AgentOperationOptions as h, type AgentDescription as i, type ProviderProfile as j, type MemoryProvider as k, type PreToolCallDecision as l, type ActiveMemoryPassArgs as m, type ActiveMemoryPassResult as n, type AgentSubagentDescription as o, type AgentToolDescription as p, type BudgetCheck as q, type BudgetTotal as r, type BudgetUsageEvent as s, type CloudEnv as t, type CloudRepo as u, type CreateSkillSpec as v, type MemoryProviderFactory as w, type MemoryProviderHandle as x, type MemoryProviderInitOptions as y, type PluginContext as z };
+export { type SystemPromptMemoryFact as $, type AgentOptions as A, type BudgetTracker as B, type CloudOptions as C, type PluginContext as D, type PostAssistantReplyContext as E, type PostToolCallContext as F, type GetAgentOptions as G, type HookName as H, type InlineSkill as I, type PreToolCallContext as J, type PreUserSendContext as K, type LocalOptions as L, type MemorySettings as M, type PreUserSendResult as N, type ProviderTransform as O, type Plugin as P, type ProviderTransformContext as Q, type RecordSessionSummaryArgs as R, type SystemPromptResolver as S, type SessionLifecycleContext as T, type SessionRecord as U, type SessionStore as V, type SettingSource as W, Skill as X, type SkillsResolver as Y, type SkillsResolverContext as Z, type SystemPromptContext as _, type AgentDefinition as a, type TelemetrySettings as a0, type ToolCallSummary as a1, type ToolResultTransformContext as a2, type TransformContext as a3, type SkillsSettings as b, type ListAgentsOptions as c, type ListResult as d, type SDKAgentInfo as e, type ListRunsOptions as f, type GetRunOptions as g, type AgentOperationOptions as h, type AgentDescription as i, type ProviderProfile as j, type MemoryProvider as k, type PreToolCallDecision as l, type ActiveMemoryPassArgs as m, type ActiveMemoryPassResult as n, type AgentSubagentDescription as o, type AgentToolDescription as p, type BudgetCheck as q, type BudgetTotal as r, type BudgetUsageEvent as s, type BuiltinToolName as t, type CloudEnv as u, type CloudRepo as v, type CreateSkillSpec as w, type MemoryProviderFactory as x, type MemoryProviderHandle as y, type MemoryProviderInitOptions as z };

package/dist/{agent-VGD5WL4N.js → agent-K3PQBS7D.js}

@@ -1,6 +1,6 @@
-export { Agent } from './chunk-TPTZA6NI.js';
-import './chunk-DUIF54UP.js';
-import './chunk-DAPSQZT4.js';
+export { Agent } from './chunk-KBXWEWKS.js';
+import './chunk-OHBIUXKM.js';
+import './chunk-ODTZ7HX3.js';
 import './chunk-YMA4S2WO.js';
 import './chunk-2SFBB54R.js';
 import './chunk-SUKXXLWD.js';
@@ -8,13 +8,14 @@ import './chunk-K2BQQ445.js';
 import './chunk-XN7NOENA.js';
 import './chunk-H73MEMQB.js';
 import './chunk-GJ6RK75E.js';
-import './chunk-VDEWG5TV.js';
+import './chunk-MVAPK2BX.js';
 import './chunk-3E77SX4H.js';
 import './chunk-WTMU7J4U.js';
 import './chunk-5JLFFPCH.js';
 import './chunk-BMAZLQQ4.js';
 import './chunk-HKCKOAIO.js';
-import './chunk-5PHVENFV.js';
+import './chunk-7FHZ4VQX.js';
+import './chunk-KVNWIAO4.js';
 import './chunk-UPRJR6IP.js';
 import './chunk-FD2UT76F.js';
 import './chunk-4VPXM6UU.js';
@@ -40,13 +41,13 @@ import './chunk-2QKTVKH3.js';
 import './chunk-AG5JPQIY.js';
 import './chunk-F7AQV62G.js';
 import './chunk-R7WIIPUR.js';
-import './chunk-SSQZA3DZ.js';
-import './chunk-FXEUP75G.js';
+import './chunk-2BDH744Z.js';
+import './chunk-Q4CMI2LP.js';
 import './chunk-44MBDIHG.js';
 import './chunk-UQGQFBRL.js';
 import './chunk-3OR54XG4.js';
 import './chunk-IDCKSLYH.js';
 import './chunk-T7XEKOVW.js';
 import './chunk-T7O6K6PX.js';
-//# sourceMappingURL=agent-VGD5WL4N.js.map
-//# sourceMappingURL=agent-VGD5WL4N.js.map
+//# sourceMappingURL=agent-K3PQBS7D.js.map
+//# sourceMappingURL=agent-K3PQBS7D.js.map

package/dist/{agent-VGD5WL4N.js.map → agent-K3PQBS7D.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-VGD5WL4N.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-K3PQBS7D.js"}

package/dist/{agent-NOEGF4GI.cjs → agent-PJMBK7HQ.cjs}

@@ -1,8 +1,8 @@
 'use strict';
 
-var chunkUFAO4T7Z_cjs = require('./chunk-UFAO4T7Z.cjs');
-require('./chunk-5BJV5UPY.cjs');
-require('./chunk-5UOVYM3P.cjs');
+var chunkLQYQHXIW_cjs = require('./chunk-LQYQHXIW.cjs');
+require('./chunk-V2UUGUY4.cjs');
+require('./chunk-6VLKVX7O.cjs');
 require('./chunk-53CBTBWO.cjs');
 require('./chunk-BV2MWEMV.cjs');
 require('./chunk-NGESVVJN.cjs');
@@ -10,13 +10,14 @@ require('./chunk-BUUUWQMB.cjs');
 require('./chunk-EI2Q7SJ5.cjs');
 require('./chunk-GHX4P3V2.cjs');
 require('./chunk-YPJ5NH5N.cjs');
-require('./chunk-UNDROG5N.cjs');
+require('./chunk-HLPSLDGL.cjs');
 require('./chunk-F3YZMOAU.cjs');
 require('./chunk-4OTIXDMU.cjs');
 require('./chunk-DQKERTND.cjs');
 require('./chunk-CTCGWIUD.cjs');
 require('./chunk-2ZPEDVLM.cjs');
-require('./chunk-Q47R5E2X.cjs');
+require('./chunk-E3WZ6Y4H.cjs');
+require('./chunk-KRD3GQAA.cjs');
 require('./chunk-U2AC6JUP.cjs');
 require('./chunk-MUUQ2WFJ.cjs');
 require('./chunk-WJVHMTKB.cjs');
@@ -42,8 +43,8 @@ require('./chunk-HJBMA5MB.cjs');
 require('./chunk-IWBGCBR6.cjs');
 require('./chunk-XSX2UU6Y.cjs');
 require('./chunk-3EE6LVWT.cjs');
-require('./chunk-3KGLRRFC.cjs');
-require('./chunk-RM7Y65IG.cjs');
+require('./chunk-6HTXPPHK.cjs');
+require('./chunk-NIRE5CNO.cjs');
 require('./chunk-5USCYPPI.cjs');
 require('./chunk-BVZW2B5V.cjs');
 require('./chunk-52NKC5HT.cjs');
@@ -55,7 +56,7 @@ require('./chunk-NUKRL3I6.cjs');
 
 Object.defineProperty(exports, "Agent", {
   enumerable: true,
-  get: function () { return chunkUFAO4T7Z_cjs.Agent; }
+  get: function () { return chunkLQYQHXIW_cjs.Agent; }
 });
-//# sourceMappingURL=agent-NOEGF4GI.cjs.map
-//# sourceMappingURL=agent-NOEGF4GI.cjs.map
+//# sourceMappingURL=agent-PJMBK7HQ.cjs.map
+//# sourceMappingURL=agent-PJMBK7HQ.cjs.map

package/dist/{agent-NOEGF4GI.cjs.map → agent-PJMBK7HQ.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-NOEGF4GI.cjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-PJMBK7HQ.cjs"}

package/dist/{chunk-SSQZA3DZ.js → chunk-2BDH744Z.js}

@@ -1,4 +1,4 @@
-import { registerBuiltins, listProviders, getProviderProfile } from './chunk-FXEUP75G.js';
+import { registerBuiltins, listProviders, getProviderProfile } from './chunk-Q4CMI2LP.js';
 
 // src/providers.ts
 function listProviders2() {
@@ -11,5 +11,5 @@ function getProviderProfile2(name) {
 }
 
 export { getProviderProfile2 as getProviderProfile, listProviders2 as listProviders };
-//# sourceMappingURL=chunk-SSQZA3DZ.js.map
-//# sourceMappingURL=chunk-SSQZA3DZ.js.map
+//# sourceMappingURL=chunk-2BDH744Z.js.map
+//# sourceMappingURL=chunk-2BDH744Z.js.map

package/dist/{chunk-SSQZA3DZ.js.map → chunk-2BDH744Z.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/providers.ts"],"names":["listProviders","getProviderProfile"],"mappings":";;;AA4BO,SAASA,cAAAA,GAA4C;AAC1D,EAAA,gBAAA,EAAiB;AACjB,EAAA,OAAO,aAAA,EAAa;AACtB;AAQO,SAASC,oBAAmB,IAAA,EAA2C;AAC5E,EAAA,gBAAA,EAAiB;AACjB,EAAA,OAAO,mBAAW,IAAI,CAAA;AACxB","file":"chunk-SSQZA3DZ.js","sourcesContent":["/**\n * The provider registry, as public API.\n *\n * It was `@internal`, which meant the SDK was the only thing that could answer \"which providers\n * exist, and what does each one need?\". `theokit` consequently kept a hand-written list of three —\n * against the 46 registered here — so an agent declaring `ollama/qwen2.5:3b` routed to whatever\n * key happened to be set instead of to Ollama (usetheokit/theokit#326).\n *\n * A second table that nothing forces to agree with the first is not a cache, it is a future bug.\n * These two functions exist so there is one table.\n *\n * Both ensure the builtins are registered before answering: registration is lazy (it happens when\n * an agent is created, a run is routed, or a provider is defined), so a caller asking early would\n * otherwise get an empty registry and reasonably conclude the SDK knows nothing.\n */\n\nimport { registerBuiltins } from \"./internal/providers/builtin/index.js\";\nimport {\n  getProviderProfile as getProfile,\n  listProviders as listProfiles,\n} from \"./internal/providers/registry.js\";\nimport type { ProviderProfile } from \"./internal/providers/types.js\";\n\n/**\n * Every registered provider — builtins, the JSON catalog, and anything a plugin registered.\n *\n * @public\n */\nexport function listProviders(): readonly ProviderProfile[] {\n  registerBuiltins();\n  return listProfiles();\n}\n\n/**\n * One provider by name or alias (`lm-studio` resolves to `lmstudio`), or `undefined` when nothing\n * has registered it.\n *\n * @public\n */\nexport function getProviderProfile(name: string): ProviderProfile | undefined {\n  registerBuiltins();\n  return getProfile(name);\n}\n"]}
+{"version":3,"sources":["../src/providers.ts"],"names":["listProviders","getProviderProfile"],"mappings":";;;AA4BO,SAASA,cAAAA,GAA4C;AAC1D,EAAA,gBAAA,EAAiB;AACjB,EAAA,OAAO,aAAA,EAAa;AACtB;AAQO,SAASC,oBAAmB,IAAA,EAA2C;AAC5E,EAAA,gBAAA,EAAiB;AACjB,EAAA,OAAO,mBAAW,IAAI,CAAA;AACxB","file":"chunk-2BDH744Z.js","sourcesContent":["/**\n * The provider registry, as public API.\n *\n * It was `@internal`, which meant the SDK was the only thing that could answer \"which providers\n * exist, and what does each one need?\". `theokit` consequently kept a hand-written list of three —\n * against the 46 registered here — so an agent declaring `ollama/qwen2.5:3b` routed to whatever\n * key happened to be set instead of to Ollama (usetheokit/theokit#326).\n *\n * A second table that nothing forces to agree with the first is not a cache, it is a future bug.\n * These two functions exist so there is one table.\n *\n * Both ensure the builtins are registered before answering: registration is lazy (it happens when\n * an agent is created, a run is routed, or a provider is defined), so a caller asking early would\n * otherwise get an empty registry and reasonably conclude the SDK knows nothing.\n */\n\nimport { registerBuiltins } from \"./internal/providers/builtin/index.js\";\nimport {\n  getProviderProfile as getProfile,\n  listProviders as listProfiles,\n} from \"./internal/providers/registry.js\";\nimport type { ProviderProfile } from \"./internal/providers/types.js\";\n\n/**\n * Every registered provider — builtins, the JSON catalog, and anything a plugin registered.\n *\n * @public\n */\nexport function listProviders(): readonly ProviderProfile[] {\n  registerBuiltins();\n  return listProfiles();\n}\n\n/**\n * One provider by name or alias (`lm-studio` resolves to `lmstudio`), or `undefined` when nothing\n * has registered it.\n *\n * @public\n */\nexport function getProviderProfile(name: string): ProviderProfile | undefined {\n  registerBuiltins();\n  return getProfile(name);\n}\n"]}

package/dist/chunk-6HTXPPHK.cjs

@@ -0,0 +1,18 @@
+'use strict';
+
+var chunkNIRE5CNO_cjs = require('./chunk-NIRE5CNO.cjs');
+
+// src/providers.ts
+function listProviders2() {
+  chunkNIRE5CNO_cjs.registerBuiltins();
+  return chunkNIRE5CNO_cjs.listProviders();
+}
+function getProviderProfile2(name) {
+  chunkNIRE5CNO_cjs.registerBuiltins();
+  return chunkNIRE5CNO_cjs.getProviderProfile(name);
+}
+
+exports.getProviderProfile = getProviderProfile2;
+exports.listProviders = listProviders2;
+//# sourceMappingURL=chunk-6HTXPPHK.cjs.map
+//# sourceMappingURL=chunk-6HTXPPHK.cjs.map

package/dist/{chunk-3KGLRRFC.cjs.map → chunk-6HTXPPHK.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/providers.ts"],"names":["listProviders","registerBuiltins","getProviderProfile"],"mappings":";;;;;AA4BO,SAASA,cAAAA,GAA4C;AAC1D,EAAAC,kCAAA,EAAiB;AACjB,EAAA,OAAOD,+BAAA,EAAa;AACtB;AAQO,SAASE,oBAAmB,IAAA,EAA2C;AAC5E,EAAAD,kCAAA,EAAiB;AACjB,EAAA,OAAOC,qCAAW,IAAI,CAAA;AACxB","file":"chunk-3KGLRRFC.cjs","sourcesContent":["/**\n * The provider registry, as public API.\n *\n * It was `@internal`, which meant the SDK was the only thing that could answer \"which providers\n * exist, and what does each one need?\". `theokit` consequently kept a hand-written list of three —\n * against the 46 registered here — so an agent declaring `ollama/qwen2.5:3b` routed to whatever\n * key happened to be set instead of to Ollama (usetheokit/theokit#326).\n *\n * A second table that nothing forces to agree with the first is not a cache, it is a future bug.\n * These two functions exist so there is one table.\n *\n * Both ensure the builtins are registered before answering: registration is lazy (it happens when\n * an agent is created, a run is routed, or a provider is defined), so a caller asking early would\n * otherwise get an empty registry and reasonably conclude the SDK knows nothing.\n */\n\nimport { registerBuiltins } from \"./internal/providers/builtin/index.js\";\nimport {\n  getProviderProfile as getProfile,\n  listProviders as listProfiles,\n} from \"./internal/providers/registry.js\";\nimport type { ProviderProfile } from \"./internal/providers/types.js\";\n\n/**\n * Every registered provider — builtins, the JSON catalog, and anything a plugin registered.\n *\n * @public\n */\nexport function listProviders(): readonly ProviderProfile[] {\n  registerBuiltins();\n  return listProfiles();\n}\n\n/**\n * One provider by name or alias (`lm-studio` resolves to `lmstudio`), or `undefined` when nothing\n * has registered it.\n *\n * @public\n */\nexport function getProviderProfile(name: string): ProviderProfile | undefined {\n  registerBuiltins();\n  return getProfile(name);\n}\n"]}
+{"version":3,"sources":["../src/providers.ts"],"names":["listProviders","registerBuiltins","getProviderProfile"],"mappings":";;;;;AA4BO,SAASA,cAAAA,GAA4C;AAC1D,EAAAC,kCAAA,EAAiB;AACjB,EAAA,OAAOD,+BAAA,EAAa;AACtB;AAQO,SAASE,oBAAmB,IAAA,EAA2C;AAC5E,EAAAD,kCAAA,EAAiB;AACjB,EAAA,OAAOC,qCAAW,IAAI,CAAA;AACxB","file":"chunk-6HTXPPHK.cjs","sourcesContent":["/**\n * The provider registry, as public API.\n *\n * It was `@internal`, which meant the SDK was the only thing that could answer \"which providers\n * exist, and what does each one need?\". `theokit` consequently kept a hand-written list of three —\n * against the 46 registered here — so an agent declaring `ollama/qwen2.5:3b` routed to whatever\n * key happened to be set instead of to Ollama (usetheokit/theokit#326).\n *\n * A second table that nothing forces to agree with the first is not a cache, it is a future bug.\n * These two functions exist so there is one table.\n *\n * Both ensure the builtins are registered before answering: registration is lazy (it happens when\n * an agent is created, a run is routed, or a provider is defined), so a caller asking early would\n * otherwise get an empty registry and reasonably conclude the SDK knows nothing.\n */\n\nimport { registerBuiltins } from \"./internal/providers/builtin/index.js\";\nimport {\n  getProviderProfile as getProfile,\n  listProviders as listProfiles,\n} from \"./internal/providers/registry.js\";\nimport type { ProviderProfile } from \"./internal/providers/types.js\";\n\n/**\n * Every registered provider — builtins, the JSON catalog, and anything a plugin registered.\n *\n * @public\n */\nexport function listProviders(): readonly ProviderProfile[] {\n  registerBuiltins();\n  return listProfiles();\n}\n\n/**\n * One provider by name or alias (`lm-studio` resolves to `lmstudio`), or `undefined` when nothing\n * has registered it.\n *\n * @public\n */\nexport function getProviderProfile(name: string): ProviderProfile | undefined {\n  registerBuiltins();\n  return getProfile(name);\n}\n"]}

package/dist/{chunk-5UOVYM3P.cjs → chunk-6VLKVX7O.cjs}

@@ -1,6 +1,7 @@
 'use strict';
 
 var chunkGHX4P3V2_cjs = require('./chunk-GHX4P3V2.cjs');
+var chunkKRD3GQAA_cjs = require('./chunk-KRD3GQAA.cjs');
 var chunkR3UPQFKK_cjs = require('./chunk-R3UPQFKK.cjs');
 var chunkSKXBJ2NU_cjs = require('./chunk-SKXBJ2NU.cjs');
 var chunkZF2LDKQQ_cjs = require('./chunk-ZF2LDKQQ.cjs');
@@ -77,7 +78,7 @@ function defaultIndexPath(cwd) {
 }
 function requireLance() {
   try {
-    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-5UOVYM3P.cjs', document.baseURI).href)));
+    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-6VLKVX7O.cjs', document.baseURI).href)));
     return r("@lancedb/lancedb");
   } catch (cause) {
     throw new chunkK3FW2XZD_cjs.ConfigurationError(
@@ -300,6 +301,7 @@ async function openLanceIndex(opts) {
   });
   return new LanceMemoryAdapter(lance);
 }
+var MEMORY_KINDS = ["user", "feedback", "project", "reference"];
 function legacyMemoryJsonPath(cwd, config) {
   if (config.storePath !== void 0) {
     return path.resolve(cwd, config.storePath);
@@ -310,6 +312,54 @@ function legacyMemoryJsonPath(cwd, config) {
   return chunkR3UPQFKK_cjs.safePathJoin(cwd, ".theokit", "memory", namespace, `${scope}-${userId}.json`);
 }
 
+// src/internal/memory/storage/memory-file.ts
+var SAFE_SLUG = /^[a-z0-9][a-z0-9_-]*$/;
+var MAX_SLUG_LENGTH = 64;
+function slugForFact(text) {
+  const slug = text.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, MAX_SLUG_LENGTH).replace(/-+$/, "");
+  return SAFE_SLUG.test(slug) ? slug : chunkR3UPQFKK_cjs.safeFilenameForId(text);
+}
+function renderMemoryFile(fields) {
+  const metadata = ["  node_type: memory"];
+  if (fields.kind !== void 0) metadata.push(`  type: ${fields.kind}`);
+  if (fields.modified !== void 0) metadata.push(`  modified: ${fields.modified}`);
+  return [
+    "---",
+    `name: ${fields.name}`,
+    `description: ${JSON.stringify(fields.description)}`,
+    "metadata:",
+    ...metadata,
+    "---",
+    "",
+    fields.body,
+    ""
+  ].join("\n");
+}
+function parseMemoryFile(raw) {
+  const { yaml, body } = chunkKRD3GQAA_cjs.splitFrontmatter(raw);
+  if (yaml === void 0) return void 0;
+  let fields;
+  try {
+    fields = chunkKRD3GQAA_cjs.parseSimpleYaml(yaml);
+  } catch {
+    return void 0;
+  }
+  const name = fields.name;
+  const description = fields.description;
+  if (typeof name !== "string" || typeof description !== "string") return void 0;
+  const metadata = fields.metadata ?? {};
+  const rawKind = metadata.type;
+  const kind = typeof rawKind === "string" && MEMORY_KINDS.includes(rawKind) ? rawKind : void 0;
+  const modified = typeof metadata.modified === "string" ? metadata.modified : void 0;
+  return {
+    name,
+    description,
+    ...kind !== void 0 ? { kind } : {},
+    ...modified !== void 0 ? { modified } : {},
+    body: body.trim()
+  };
+}
+
 // src/internal/memory/storage/markdown-store.ts
 var MEMORY_MD_HEADER = "# Memory\n\n> Auto-managed by @theokit/sdk. Edit freely \u2014 the SDK reads from here.\n";
 var FACTS_HEADING = "## Facts";
@@ -323,65 +373,86 @@ function notesDir(cwd) {
   return path.join(memoryDir(cwd), "notes");
 }
 async function readFactsFromMarkdown(cwd) {
-  let raw;
+  let entries;
   try {
-    raw = await promises.readFile(memoryMdPath(cwd), "utf8");
+    entries = await promises.readdir(memoryDir(cwd));
   } catch {
     return [];
   }
-  return parseFactsSection(raw);
+  const facts = [];
+  for (const entry of entries.sort()) {
+    const fact = await readMemoryFileAt(cwd, entry);
+    if (fact !== void 0) facts.push(fact);
+  }
+  try {
+    facts.push(...parseFactsSection(await promises.readFile(memoryMdPath(cwd), "utf8")));
+  } catch {
+  }
+  return facts;
+}
+async function readMemoryFileAt(cwd, entry) {
+  if (!entry.endsWith(".md") || entry === "MEMORY.md") return void 0;
+  let raw;
+  try {
+    raw = await promises.readFile(path.join(memoryDir(cwd), entry), "utf8");
+  } catch {
+    return void 0;
+  }
+  const parsed = parseMemoryFile(raw);
+  if (parsed === void 0) return void 0;
+  return {
+    text: parsed.description,
+    ...parsed.kind !== void 0 ? { kind: parsed.kind } : {},
+    ...parsed.modified !== void 0 ? { modified: parsed.modified } : {}
+  };
 }
 function appendFactToMarkdown(cwd, fact) {
   return chunkZF2LDKQQ_cjs.withCwdMutex(memoryDir(cwd), async () => {
-    const path = memoryMdPath(cwd);
-    let raw = "";
-    try {
-      raw = await promises.readFile(path, "utf8");
-    } catch {
-      raw = "";
+    if (fact.kind !== void 0 && !MEMORY_KINDS.includes(fact.kind)) {
+      throw new chunkK3FW2XZD_cjs.ConfigurationError(
+        `Unknown memory fact kind "${fact.kind}". Expected one of: ${MEMORY_KINDS.join(", ")}.`,
+        { code: "invalid_memory_kind" }
+      );
     }
-    const sanitized = chunkJTB5Q42C_cjs.redactSecrets(fact.text);
-    const next = insertFactBullet(raw, sanitized);
+    const text = chunkJTB5Q42C_cjs.redactSecrets(fact.text);
+    const name = slugForFact(text);
     await promises.mkdir(memoryDir(cwd), { recursive: true });
-    await chunkI6TGFUCO_cjs.replaceFileAtomic(path, next);
+    await chunkI6TGFUCO_cjs.replaceFileAtomic(
+      path.join(memoryDir(cwd), `${name}.md`),
+      renderMemoryFile({
+        name,
+        description: text,
+        ...fact.kind !== void 0 ? { kind: fact.kind } : {},
+        modified: (/* @__PURE__ */ new Date()).toISOString(),
+        body: text
+      })
+    );
+    await chunkI6TGFUCO_cjs.replaceFileAtomic(memoryMdPath(cwd), await nextIndex(cwd, text, name));
   });
 }
+async function nextIndex(cwd, text, name) {
+  let existing = "";
+  try {
+    existing = await promises.readFile(memoryMdPath(cwd), "utf8");
+  } catch {
+    existing = "";
+  }
+  const entry = `- [${text}](${name}.md)`;
+  const kept = existing.split("\n").filter((line) => !line.startsWith(`- [`) || !line.includes(`](${name}.md)`));
+  const body = kept.join("\n").trimEnd();
+  const head = body.length > 0 ? body : MEMORY_MD_HEADER.trimEnd();
+  return `${head}
+${entry}
+`;
+}
+var INDEX_ENTRY = /^\[[^\]]*\]\([^)]+\.md\)$/;
 function parseFactsSection(raw) {
   const idx = raw.indexOf(FACTS_HEADING);
   if (idx === -1) return [];
   const tail = raw.slice(idx + FACTS_HEADING.length);
   const nextHeading = tail.search(/\n#{1,2}\s/);
   const block = nextHeading === -1 ? tail : tail.slice(0, nextHeading);
-  return block.split("\n").map((line) => line.trim()).filter((line) => line.startsWith("- ")).map((line) => ({ text: line.slice(2).trim() }));
-}
-function insertFactBullet(raw, fact) {
-  const bullet = `- ${fact}`;
-  if (raw.length === 0) {
-    return `${MEMORY_MD_HEADER}
-${FACTS_HEADING}
-
-${bullet}
-`;
-  }
-  const idx = raw.indexOf(FACTS_HEADING);
-  if (idx === -1) {
-    const sep = raw.endsWith("\n") ? "" : "\n";
-    return `${raw}${sep}
-${FACTS_HEADING}
-
-${bullet}
-`;
-  }
-  const after = idx + FACTS_HEADING.length;
-  const nextHeading = raw.slice(after).search(/\n#{1,2}\s/);
-  if (nextHeading === -1) {
-    const trailing = raw.endsWith("\n") ? "" : "\n";
-    return `${raw}${trailing}${bullet}
-`;
-  }
-  const insertAt = after + nextHeading;
-  return `${raw.slice(0, insertAt)}
-${bullet}${raw.slice(insertAt)}`;
+  return block.split("\n").map((line) => line.trim()).filter((line) => line.startsWith("- ")).map((line) => line.slice(2).trim()).filter((body) => !INDEX_ENTRY.test(body)).map((body) => ({ text: body }));
 }
 async function readFacts(cwd, config) {
   if (!config.enabled) return [];
@@ -495,6 +566,19 @@ function blendScores(hit, vectorScore, weights) {
     ...vectorScore > 0 ? { vectorScore } : {}
   };
 }
+async function markdownFilesIn(dir, root, skip = []) {
+  let entries;
+  try {
+    entries = await promises.readdir(dir);
+  } catch {
+    return [];
+  }
+  return entries.filter((entry) => entry.endsWith(".md") && !skip.includes(entry)).map((entry) => ({
+    absolutePath: path.join(dir, entry),
+    relPath: path.relative(root, path.join(dir, entry)),
+    source: "memory"
+  }));
+}
 async function collectMarkdownFiles(cwd) {
   const root = memoryDir(cwd);
   const results = [];
@@ -507,15 +591,8 @@ async function collectMarkdownFiles(cwd) {
     });
   } catch {
   }
-  try {
-    const entries = await promises.readdir(notesDir(cwd));
-    for (const entry of entries) {
-      if (!entry.endsWith(".md")) continue;
-      const abs = path.join(notesDir(cwd), entry);
-      results.push({ absolutePath: abs, relPath: path.relative(root, abs), source: "memory" });
-    }
-  } catch {
-  }
+  results.push(...await markdownFilesIn(memoryDir(cwd), root, ["MEMORY.md"]));
+  results.push(...await markdownFilesIn(notesDir(cwd), root));
   const wikiFiles = await discoverWikiFiles(cwd);
   for (const wiki of wikiFiles) {
     results.push({
@@ -983,5 +1060,5 @@ exports.openMemoryDb = openMemoryDb;
 exports.readFacts = readFacts;
 exports.readFactsFromMarkdown = readFactsFromMarkdown;
 exports.writeSessionSummary = writeSessionSummary;
-//# sourceMappingURL=chunk-5UOVYM3P.cjs.map
-//# sourceMappingURL=chunk-5UOVYM3P.cjs.map
+//# sourceMappingURL=chunk-6VLKVX7O.cjs.map
+//# sourceMappingURL=chunk-6VLKVX7O.cjs.map